CVE catalog

CVE-2008-0061

maradns denial of service

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.11% · Oct 25, 2026

MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted DNS packet that prevents an authoritative name (CNAME) record from resolving, aka "improper rotation of resource records."

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianmaradns111.2.12.08-1fixed
Debianmaradns4.01.2.12.04-1vulnerable
Debianmaradns4.01.2.12.04-1etch1vulnerable
Debianmaradns4.01.2.12.04-1etch2fixed
Debianmaradns3.11.0.27-1vulnerable
Debianmaradns3.11.0.27-2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianmaradnsdeb111.2.12.08-1Not reportedDEBIAN-CVE-2008-0061Not reported
Debianmaradnsdeb4.01.2.12.04-1etch2Not reportedDSA-1445-1Not reported
Debianmaradnsdeb3.11.0.27-2Not reportedDSA-1445-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References